[Rspamd-Users] score 0.0 ignored

[Tino Hendricks]

Dear list,

I have a composite against pharmacy spam set up from a very fine suggestion in this list:

rspamd_config.MPI_APONL_LP = {
   score = 3.0,
   description = 'local part is subject start',
   callback = function(task)
… 
…
…
     return true, factor
   end,
}

— match some well-known apotheken spam sender localparts to use in composite, see local.d/composites.conf
config['regexp']['MPI_APONL_SENDER'] = {
   re = 'From=/^(.*<)?(firewall|office|info|mta|smtp)@.*$/H',
   -- no scoring here as too generic, only used in composites
   score = 0.0,
   description = 'contains possible apothekenspam sender',
}

coming together in

MPI_APONL_WITH_SENDER_COMPOSITE {
   # the '-' prefix is required to KEEP the symbol and score,
   # otherwise, composites remove the symbols used and their scores
   expression = "-MPI_APONL_LP and -MPI_APONL_SENDER";
   score = 1.0;
}

Now a „good“ mail got the SPAM header added with

2025-08-17 13:50:14 #453395(normal) <75f80d>; task; rspamd_task_write_log: id: <f3b61cf8-8b20-2d9a-2793-fe6b3f7cc112 at example.org>, qid: <71039872001>, ip: 2a01:...::1, from: <info at example.org>, (default: T (add header): [5.87/14.00] [BAD_REP_POLICIES(2.00){},MPI_APONL_SENDER(2.00){},R_DKIM_NA(1.50){},BAYES_SPAM(1.27){88.11%;},FROM_EQ_ENVFROM(-1.00){},MIME_HTML_ONLY(0.20){},MIME_GOOD(-0.10){multipart/mixed;},ARC_ALLOW(0.00){microsoft.com:s=arcselector10001:i=1;},ASN(0.00){asn:8075, ipnet:2a01:...::/36, country:US;},DMARC_POLICY_ALLOW(0.00){example.org;none;},FROM_NO_DN(0.00){},GREYLIST(-0.00){pass;body;},HAS_ATTACHMENT(0.00){},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:~;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_THREE(0.00){3;},RCVD_IN_DNSWL_NONE(0.00){2a01:111:f403:c20b::1:from;},RCVD_TLS_LAST(0.00){},R_SPF_ALLOW(0.00){+ip6:2a01:...::/51;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){},URIBL_BLOCKED(0.00){BEUP281CU002.outbound.protection.outlook.com:helo;mail-germanynorthazlp170100001.outbound.protection.outlook.com:rdns;}]), len: 88092, time: 950.096ms, dns req: 30, digest: <1be5625f3cadf953a68a25d6f4f0241e>, rcpts: <mail at example.org>, mime_rcpts: <mail at example.org>

Where does the MPI_APONL_SENDER(2.00){} score come from when the config['regexp‘] has a score of 0.0 ?

Thank you very much for your help!

Tino


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4401 bytes
Desc: not available
URL: <https://lists.rspamd.com/pipermail/users/attachments/20250818/fa5f3102/attachment.bin>